$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer File: DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer (raw, json) Hash identifier: AxVHNQ1VLu+JBc0EDrdLR9wu19qe7/v5PHeoANGE6mQ= Subject key identifier: DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 5FFFF551ED5FB5E2A0549F8457297673066A6C6C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 18 Mar 2025 15:28:50 +0000 Certificate not after: Tue 17 Mar 2026 15:33:50 +0000 Subordinate resources: IP: 2a0a:6044:bc00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ff:f5:51:ed:5f:b5:e2:a0:54:9f:84:57:29:76:73:06:6a:6c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Mar 18 15:28:50 2025 GMT Not After : Mar 17 15:33:50 2026 GMT Subject: CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b7:6b:c4:04:53:97:89:1f:80:f3:58:e5:54: 63:47:c2:ca:ff:1b:cf:a7:7f:a2:95:ac:85:3a:df: 3d:81:64:73:f3:d6:93:8d:03:12:f6:f0:85:fe:74: d4:8a:fe:e9:75:29:16:fd:36:70:b2:7b:25:29:3f: 2e:fc:f7:19:4c:b5:9a:72:83:d5:71:2c:6a:61:da: c1:b7:de:05:33:07:43:98:5a:63:84:47:17:11:61: b9:63:7a:21:1e:3f:77:4e:f4:8b:f9:82:ed:b5:c1: 03:77:47:b1:e3:7f:e8:0e:ac:eb:d1:58:e7:0a:cd: 5e:e9:db:6f:4d:99:98:e0:36:88:e9:0a:83:ab:07: b1:b9:2a:85:0e:ab:f3:8c:b5:1e:89:8f:0a:84:a0: 91:a7:9d:e9:b1:e2:5d:5c:eb:90:06:51:a0:7f:8b: db:82:f9:dc:b0:c9:69:e3:28:10:04:e6:36:ca:c4: 83:28:84:7c:bf:62:56:75:0e:50:5b:fc:1e:64:5f: 52:ec:36:95:aa:5c:07:95:47:7c:01:a3:44:71:a4: c0:a6:75:cb:a4:0e:5d:e5:70:df:1f:3b:5d:7e:b8: 14:e1:f6:11:bb:3c:9b:16:90:d6:57:29:82:4d:84: 5b:14:b1:69:95:48:36:74:8d:90:c5:e6:c5:5e:05: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:bc00::/40 Signature Algorithm: sha256WithRSAEncryption 6c:35:cf:3c:90:51:41:75:1a:05:12:1b:f4:5d:8c:b5:e7:d0: 87:1e:2d:0f:35:cc:f4:d9:67:6d:f1:2f:c8:e1:a2:13:87:5c: 3d:52:d8:10:51:72:19:4d:4d:05:64:de:ba:c2:11:f8:f4:5d: 5f:18:90:66:c7:f3:83:df:a8:b9:c4:21:31:d3:1d:53:ce:15: 5e:37:8f:89:d6:69:c5:45:bd:94:06:8d:83:00:db:40:28:50: 25:04:a4:5c:50:fe:3c:28:12:17:9b:3a:2f:94:d7:26:3c:82: 71:c1:86:21:c4:3d:22:cd:44:fe:4a:c0:18:95:b2:e6:4b:a4: 80:70:42:a2:be:66:45:61:23:2d:8d:af:b8:47:fa:fa:9a:97: 19:0b:4f:72:89:be:e8:50:81:94:70:05:c2:f3:9f:6e:ac:7c: e9:a3:7e:b1:35:25:72:19:69:e5:58:18:b1:a1:32:cf:d0:78: 2d:9b:d3:87:95:6f:e5:7b:06:8b:b5:53:e9:55:59:fe:84:82: ca:52:47:5d:80:64:42:c6:37:b1:bc:32:08:c3:ce:70:af:3a: 88:66:5b:56:8d:db:51:d7:d6:9d:3d:29:02:00:91:3b:0f:4d: b8:bd:ef:07:86:92:b3:3f:2b:5c:cd:98:6e:55:e6:2b:fd:c3: 5f:4b:13:0e -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUX//1Ue1fteKgVJ+EVyl2cwZqbGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAzMTgxNTI4NTBaFw0yNjAzMTcxNTMzNTBaMDMxMTAvBgNV BAMTKERBOENCMzU4MTJDQTFGQTNBMUJENkQzODY5Mzg1MDcyNzkzRUM1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJt2vEBFOXiR+A81jlVGNHwsr/ G8+nf6KVrIU63z2BZHPz1pONAxL28IX+dNSK/ul1KRb9NnCyeyUpPy789xlMtZpy g9VxLGph2sG33gUzB0OYWmOERxcRYbljeiEeP3dO9Iv5gu21wQN3R7Hjf+gOrOvR WOcKzV7p229NmZjgNojpCoOrB7G5KoUOq/OMtR6JjwqEoJGnnemx4l1c65AGUaB/ i9uC+dywyWnjKBAE5jbKxIMohHy/YlZ1DlBb/B5kX1LsNpWqXAeVR3wBo0RxpMCm dcukDl3lcN8fO11+uBTh9hG7PJsWkNZXKYJNhFsUsWmVSDZ0jZDF5sVeBUqLAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTajLNYEsofo6G9 bThpOFByeT7FDjAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZmM4ZDE5ZDAtZDIyMS00NDQ4LTgxMWEtMGUxNjExYTQ2NDQyLzEv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9mYzhkMTlkMC1kMjIxLTQ0NDgtODExYS0wZTE2MTFhNDY0NDIv MS9EQThDQjM1ODEyQ0ExRkEzQTFCRDZEMzg2OTM4NTA3Mjc5M0VDNTBFLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEvDANBgkqhkiG9w0BAQsFAAOCAQEAbDXP PJBRQXUaBRIb9F2MtefQhx4tDzXM9NlnbfEvyOGiE4dcPVLYEFFyGU1NBWTeusIR +PRdXxiQZsfzg9+oucQhMdMdU84VXjePidZpxUW9lAaNgwDbQChQJQSkXFD+PCgS F5s6L5TXJjyCccGGIcQ9Is1E/krAGJWy5kukgHBCor5mRWEjLY2vuEf6+pqXGQtP com+6FCBlHAFwvOfbqx86aN+sTUlchlp5VgYsaEyz9B4LZvTh5Vv5XsGi7VT6VVZ /oSCylJHXYBkQsY3sbwyCMPOcK86iGZbVo3bUdfWnT0pAgCROw9NuL3vB4aSsz8r XM2YblXmK/3DX0sTDg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:48:27 2025 by rpki-client